Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/0XSnGPN4ZFxk8_lhcPN-rPm0S40.roa
File: 0XSnGPN4ZFxk8_lhcPN-rPm0S40.roa (raw, json)
Hash identifier: 0ucYwJNSE17Uoa0pbkg3UfaLHULdDrli5vO57ag/Rro=
Subject key identifier: D1:74:A7:18:F3:78:64:5C:64:F3:F9:61:70:F3:7E:AC:F9:B4:4B:8D
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 01942067D7C53B6B4F9C9F0109057C98D1A3
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/0XSnGPN4ZFxk8_lhcPN-rPm0S40.roa
Signing time: Wed 01 Jan 2025 05:47:43 +0000
ROA not before: Wed 01 Jan 2025 05:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198154
IP address blocks: 213.134.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d7:c5:3b:6b:4f:9c:9f:01:09:05:7c:98:d1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Jan 1 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d174a718f378645c64f3f96170f37eacf9b44b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:83:0b:28:d3:f3:3a:06:1c:96:95:98:b4:
e2:57:56:51:90:10:6c:2b:bd:92:79:a3:69:24:c9:
e6:18:e0:51:de:e2:a2:a2:49:ab:78:b3:82:2b:5c:
d9:3f:fe:4c:3e:df:2c:26:45:e4:62:37:7a:58:10:
df:67:f1:55:2f:40:36:2d:bc:6f:e3:7c:5a:3d:a3:
46:fb:02:7f:01:00:a0:e2:4c:1a:74:40:75:6c:89:
bb:06:28:53:d5:ac:63:51:ec:c8:a1:5e:62:31:63:
5b:31:63:0f:f9:f5:bf:8c:51:b9:42:e1:b5:85:76:
42:1d:2c:56:67:74:8b:eb:04:cb:78:70:3a:b4:f9:
d5:73:ae:52:1c:39:1f:cd:80:4a:f0:73:e6:5d:77:
bd:fa:ba:5c:27:58:41:91:ef:d6:21:4c:22:94:d7:
ea:b4:e2:dc:e3:43:dc:5c:6e:e7:20:c6:0b:13:22:
d1:bd:63:24:13:70:62:3f:30:95:60:65:cc:9f:1e:
4f:c1:67:2e:77:1b:74:51:c3:cf:af:c7:75:69:e1:
22:90:ef:c3:c3:41:74:8b:52:75:5c:ee:80:19:13:
cb:da:de:25:eb:35:4f:32:40:c3:13:49:a8:00:37:
15:9a:09:f8:42:c8:3b:e8:b9:03:7c:06:d5:ef:73:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:A7:18:F3:78:64:5C:64:F3:F9:61:70:F3:7E:AC:F9:B4:4B:8D
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/0XSnGPN4ZFxk8_lhcPN-rPm0S40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.17.0/24
Signature Algorithm: sha256WithRSAEncryption
17:52:c6:ab:61:73:00:01:8d:16:48:75:e5:2c:76:69:4c:4d:
92:d1:fc:d8:47:20:44:d2:21:98:d4:d5:b9:94:38:42:7b:de:
1a:5d:ff:ee:9d:f8:8d:0b:ac:f6:7b:60:70:02:98:ce:63:16:
5c:23:76:77:fe:48:1d:1a:29:34:16:67:b2:93:22:6d:93:e0:
58:8f:45:5e:16:39:3d:55:f9:9e:0d:5f:b8:7f:eb:99:64:5b:
32:3c:36:06:6d:e0:8d:20:11:7f:ce:74:07:20:73:4f:20:8f:
12:6c:d1:81:ac:cc:42:37:6f:09:5d:13:c4:ee:16:f9:4b:56:
47:bc:f2:7c:c5:e3:ac:6f:43:0f:b8:58:ae:73:49:4a:6b:51:
16:32:ff:bf:df:40:57:be:5c:63:55:72:4d:24:24:ba:95:59:
26:79:c0:bb:d9:ab:0e:75:b0:6d:aa:bb:d2:d2:6b:31:ac:c8:
d5:15:59:c1:10:24:d5:f6:44:56:f0:76:2c:5c:48:fd:c1:ec:
1b:97:ba:ba:20:a3:34:ff:cd:6f:ac:08:66:cc:1f:03:7f:12:
64:75:7e:3e:e0:54:2a:f1:b9:11:b1:dc:6d:7b:2a:bc:5e:1d:
7b:21:65:f7:30:50:47:d8:24:fd:7e:c9:f9:ba:30:d2:b9:91:
c1:5c:50:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:08:43 2025 by rpki-client